CVE-2019-19160 - Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp)

HIGH

Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp)

Published Jun 29, 2020

8.8

HIGH

CVSS 3.1

EPSS 0.58%

Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp).

Vendor Cabsoftware Product Reportexpress ProPlus Default
unknown
Affected
- ≥ unspecified, ≤ 3.0.0.62

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Cabsoftware	Reportexpress ProPlus	unknown	Affected ≥ unspecified, ≤ 3.0.0.62

No remediation recorded yet.

Weaknesses (2)

CWE-345

CWE-353

Link	Providers	Tags
http://www.cabsoftware.com:8080/HomePage2015A/html/		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8792		Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35474		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner krcert

Published Jun 29, 2020

Updated Aug 5, 2024

Reserved Nov 21, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner krcert

Published Jun 29, 2020

Updated Aug 5, 2024

GitHub

No data